I'm want to grant a user administrative rights to one application on Windows 7.
I don't want them to be able to have full admin rights, but admin rights are required for one of the applications they need to use.

Is there a way to set up a batch script or something where the user won't know it's being run as admin?

Free for private use??? That's means I cannot use it at work!!!
–
MUY BelgiumOct 13 '14 at 9:20

Yes, that would appear to be the case. 4€/computer is not that much. I Guess you could ask them if you can only buy one license. Or of course use something else eg., jc.bellamy.free.fr/en/superexec.html
–
AjasjaOct 13 '14 at 9:29

Command line tool for starting process in alternate security context. Basically this is a runas replacement. Also allows you to create job files and encode the id, password, and command line in a file so it can be used by normal users.

This is intended for a domain admin type setup, but it looks like you can do it locally.

Simply on your administrator side you would build the RAG file (an encrypted file hosing the admin credentials for the client to use). You would set the permission to the file/program available to be run as an admin.

Then you would copy the RAG file over to the non-admin side and install the CLIENT for Runas-GUI. Then import the RAG file and they should, theoretically, have access.

You can create a scheduled task that runs the target application. Set the scheduled task to run with credentials that have administrator rights. You can create a shortcut to run the scheduled task for users that only have standard credentials, but when the task runs it will still use the administrator credentials.

Are there any security concerns from doing this? Privilege escalation or whatnot?
–
ChimneyImpNov 30 '12 at 20:46

1

It means any user on that machine can run that program, not just the one you want to give access for. Also, I'm not 100% sure it will work, because you may still need to pass a UAC prompt.
–
Joel CoehoornNov 30 '12 at 21:13

What? Where did you get the second program from? They want to allow a user to run a program that requires admin privileges without giving them universal admin rights.
–
SynetechNov 30 '12 at 17:33

@Synetech he said "I don't want them to be able to have full admin rights, but admin rights are required for one of the applications they need to use." that sounded like one program launching another to me...
–
chipgwNov 30 '12 at 17:42

1

Strange that you got that from the line. It seems obvious to me, perhaps because it’s not exactly a unique situation; it’s come up plenty of times before.
–
SynetechNov 30 '12 at 18:05